$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa File: dd8e5c92-820a-3d00-9890-40b0efb85734.roa (raw, json) Hash identifier: 2a5FoBd0/midhnn0fwuJXzLD3hjXGza/KQeedY5dUOQ= Subject key identifier: CB:92:43:82:DE:8A:A4:DF:98:C6:9A:B4:71:6B:95:20:3C:81:6F:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A86DB9358FCE90B383C88C380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 70.32.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:93:58:fc:e9:0b:38:3c:88:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=c1339a4e-6a5f-41be-b5f3-8092884cbe05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:38:e7:69:5e:cf:27:60:ed:b1:64:fb:bf: fb:7a:7c:6e:a8:62:b0:df:b5:01:3a:38:d1:f5:bb: cf:35:b6:dd:99:12:12:48:9a:e8:04:f3:04:c6:26: c4:74:54:33:01:87:bb:1f:71:f4:f5:c5:b1:51:8d: 53:29:fa:8f:0d:e0:dd:6b:2d:b3:18:26:ae:51:1c: 6b:6c:c5:f9:7e:e7:03:f9:c0:c2:01:f3:13:5f:97: e8:a2:4a:4e:0f:f2:72:2b:d5:0c:09:2a:af:c9:d6: 17:a4:43:cc:0b:c4:9d:d5:34:e9:da:23:2a:5a:12: fc:44:7d:e5:1e:8e:f9:d5:6a:5c:8d:df:cb:17:bd: c2:3f:ea:34:49:7a:01:6e:d6:84:ca:46:65:b0:c0: 80:78:1e:dc:84:df:e1:9c:20:a1:2a:fa:6b:c0:30: 39:cd:ac:37:4f:47:e1:97:fe:08:d5:56:88:dd:6f: 5b:bd:01:77:bf:10:e1:9f:59:e8:3a:a6:38:0c:5a: 21:c8:71:45:9d:24:bf:16:26:46:8e:b3:de:56:c9: 19:8c:85:d5:c2:e6:1b:ab:22:ea:4a:32:01:b5:da: a8:a0:94:1b:2b:3c:de:1f:e3:58:77:89:cd:3e:e4: ff:e0:cc:e5:91:b5:9a:f5:eb:c4:28:0c:ab:ef:e6: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:92:43:82:DE:8A:A4:DF:98:C6:9A:B4:71:6B:95:20:3C:81:6F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:00:1e:21:4d:b5:25:8e:cc:0a:4f:7b:6a:91:8e:a5:86:a9: 50:c0:36:c6:0e:f7:3b:a6:54:03:ef:cc:e2:92:70:46:16:2f: b2:18:96:5f:97:1a:4b:2e:62:29:0d:69:d1:d6:7a:b5:88:cd: df:0b:44:66:c9:73:ae:11:e2:36:aa:5c:45:87:de:19:b2:58: 4a:ba:69:61:e5:8b:27:67:96:b7:e7:23:56:a8:c6:ca:7d:d4: 46:65:60:e9:74:c6:49:39:35:89:3f:bd:90:e1:25:ab:f6:93: a6:dc:df:78:e0:ae:1b:fa:4e:7a:c3:50:44:93:6c:58:e2:c8: 3a:4d:43:1f:61:d9:4e:15:33:f7:62:60:ee:54:d9:31:cb:5b: 10:53:24:c5:fa:fe:f8:2d:74:de:5e:90:38:92:b1:59:03:65: cd:57:40:7e:ec:fa:c2:fe:69:39:15:ae:51:e6:f0:79:4f:7e: d5:74:40:66:f3:4b:6f:43:1d:02:7d:c6:ca:86:45:90:17:15: 91:81:ca:01:e8:03:64:da:bc:43:e3:fa:ec:c4:8e:93:ce:2a: 43:a6:8e:9a:2f:0d:a8:5a:f7:b9:17:d8:0a:77:dd:b1:a1:ea: 51:28:1f:f5:98:c5:be:c5:47:71:f9:9c:76:74:da:8a:be:93: 7e:0e:2e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG25NY/OkLODyIw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YzEzMzlhNGUtNmE1Zi00MWJlLWI1ZjMtODA5Mjg4NGNiZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipU452lezydg7bFk+7/7enxuqGKw37UBOjjR 9bvPNbbdmRISSJroBPMExibEdFQzAYe7H3H09cWxUY1TKfqPDeDday2zGCauURxr bMX5fucD+cDCAfMTX5fookpOD/JyK9UMCSqvydYXpEPMC8Sd1TTp2iMqWhL8RH3l Ho751Wpcjd/LF73CP+o0SXoBbtaEykZlsMCAeB7chN/hnCChKvprwDA5zaw3T0fh l/4I1VaI3W9bvQF3vxDhn1noOqY4DFohyHFFnSS/FiZGjrPeVskZjIXVwuYbqyLq SjIBtdqooJQbKzzeH+NYd4nNPuT/4MzlkbWa9evEKAyr7+bj7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuSQ4LeiqTfmMaatHFrlSA8gW9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ4ZTVjOTItODIwYS0z ZDAwLTk4OTAtNDBiMGVmYjg1NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMAHiFNtSWOzApPe2qRjqWGqVDANsYO9zumVAPvzOKScEYWL7IYll+X GksuYikNadHWerWIzd8LRGbJc64R4jaqXEWH3hmyWEq6aWHliydnlrfnI1aoxsp9 1EZlYOl0xkk5NYk/vZDhJav2k6bc33jgrhv6TnrDUESTbFjiyDpNQx9h2U4VM/di YO5U2THLWxBTJMX6/vgtdN5ekDiSsVkDZc1XQH7s+sL+aTkVrlHm8HlPftV0QGbz S29DHQJ9xsqGRZAXFZGBygHoA2TavEPj+uzEjpPOKkOmjpovDaha97kX2Ap33bGh 6lEoH/WYxb7FR3H5nHZ02oq+k34OLpc= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:32 2025 by rpki-client